Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/2111E12CE05211EFBD383A20C4F9AE02.roa
File: 2111E12CE05211EFBD383A20C4F9AE02.roa (raw, json)
Hash identifier: c431IYn436Uj5rw6ETcbG2O2YZDo5nDTSEWVTd/ILzI=
Subject key identifier: FD:6A:53:88:29:2F:68:C9:00:55:5B:27:4D:E6:2B:A9:38:7B:B2:2A
Certificate issuer: /CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Certificate serial: 0113
Authority key identifier: AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/2111E12CE05211EFBD383A20C4F9AE02.roa
Signing time: Thu 27 Feb 2025 06:29:33 +0000
ROA not before: Thu 27 Feb 2025 06:29:33 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 56307
IP address blocks: 203.3.178.0/23 maxlen: 24
203.3.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B2CD, serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Validity
Not Before: Feb 27 06:29:33 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67c0064d-b7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:de:95:3a:70:94:21:6f:39:52:81:a7:d8:
ad:b5:f2:d5:94:b0:b8:b2:ba:16:a2:72:9a:62:f1:
28:33:da:8f:b9:18:18:59:42:c8:33:34:30:8e:8b:
20:5b:d7:e5:c1:e0:bd:69:82:f9:b2:97:b8:6b:17:
54:4e:3c:f2:22:e7:4d:88:a8:86:47:39:50:28:99:
0f:b3:0d:0c:5a:4e:40:12:44:5e:80:30:e6:cf:ef:
1a:b0:02:bd:b7:03:65:83:d1:49:e9:73:5a:31:75:
24:b6:62:6e:62:72:cd:d5:ac:35:41:27:bd:98:5e:
47:7c:6d:7b:9e:4e:6d:f9:bc:a7:f8:d6:a3:7b:f1:
39:f1:83:01:5d:95:33:a8:50:ae:da:28:c8:7e:8d:
fe:72:8a:e9:39:93:03:ac:fd:7a:2a:ab:14:b8:e0:
74:0e:4f:49:30:0d:a3:fe:e7:d6:25:de:24:42:1e:
3f:be:1c:5f:01:f8:ba:02:f1:09:0b:00:84:38:47:
b9:48:c4:11:58:64:cd:19:a2:69:73:15:a3:b9:d2:
3d:1e:19:21:a1:17:35:79:33:e0:c3:0e:b1:9c:04:
6e:28:5c:ba:70:9d:45:38:ce:18:fb:69:f5:c7:9b:
c6:c3:79:26:82:84:14:3e:b1:92:30:8c:7f:8d:97:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6A:53:88:29:2F:68:C9:00:55:5B:27:4D:E6:2B:A9:38:7B:B2:2A
X509v3 Authority Key Identifier:
keyid:AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/2111E12CE05211EFBD383A20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.178.0/23
203.3.188.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:0f:47:6e:c7:a2:27:99:3f:74:6d:3b:02:c4:8e:74:b5:9b:
75:28:16:af:d5:8b:8c:88:31:2a:70:ec:25:ec:bb:1a:02:2a:
6b:12:fa:48:f5:2e:c1:c3:d8:67:16:ea:8a:d7:4a:dd:51:6c:
22:55:da:f6:8f:39:0a:1a:dd:51:d4:03:63:45:af:7c:38:55:
60:7b:78:ee:52:39:67:e1:82:53:61:41:c9:35:e9:86:5e:38:
61:55:fe:bc:c1:fe:b2:a8:0b:a4:0f:db:e8:fb:9b:ab:7d:3b:
84:2d:f1:3e:2d:16:75:e5:ea:61:ad:1b:d0:4d:dd:d7:8e:3b:
59:9f:2c:b4:df:8c:ed:5a:6b:12:75:10:cf:f8:12:4d:ea:98:
03:86:fd:ee:44:7c:1f:92:f4:1d:34:44:fe:4b:78:59:17:a5:
d7:5e:96:94:4c:50:d2:0e:fe:cf:e4:10:13:fe:95:e7:bc:9a:
fb:8e:aa:d9:34:28:4a:12:f1:c1:2d:30:23:77:07:dd:f9:46:
a8:a0:0f:06:c1:d2:a0:28:93:be:e1:02:c8:18:1f:80:c6:a9:
29:f5:06:14:bf:d8:2f:38:fa:e4:17:8e:c7:65:35:41:c2:96:
d3:bd:4f:78:99:ef:57:14:d7:ef:36:e4:b0:ea:dd:fd:e6:9c:
c9:d9:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:33 2025 by rpki-client